NFE - Audit

CertiK9 Nov 2022Files named in the report

Audit

CertiK reviewed NFE (NFE - Audit) on 9 Nov 2022: 12 findings, 0 critical; 2 marked fixed, 2 acknowledged, 8 open.

No open critical findings

Open the report Open NFE’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings12

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	2	0
Medium	0	0	1
Low	8	0	1

Medium`lpPairs` is Not UpdatedFixed

The `setNewRouter()` function permits to update of the router and the liquidity pool address of the token. ```solidity=322 function setNewRouter(address newRouter) external onlyOwner { require(!_hasLiqBeenAdded, "Cannot change after development."); IRouter02 _newRouter = IRouter02(newRouter); address get_pair = IFactoryV2(_newRouter.factory()).getPair(address(this), _newRouter.WETH()); if (get_pair == address(0)) { lpPair = IFactoryV2(_newRouter.factory()).createPair(address(this), _newRouter.WETH()); } else { lpPair = get_pair; } dexRouter = _newRouter; _approve(address(this), address(dexRouter), type(uint256).max); } ``` Inside the function `setNewRouter()`, the `lpPairs[lpPair]` is not updated when the `router` is changed.

LowThe `toLiquify` amount of tokens are unusedFixed

The `contractSwap()` function swaps tokens for ETH, however, not all the `contractTokenBalance` amount of token are swapped for ETH, there `toLiquify` amount of tokens left to the contract and are not swapped for ETH. ```solidity=518 uint256 toLiquify = ((contractTokenBalance * ratios.development) / ratios.totalSwap) / 2; uint256 swapAmt = contractTokenBalance - toLiquify; address[] memory path = new address[](2); path[0] = address(this); path[1] = dexRouter.WETH(); try dexRouter.swapExactTokensForETHSupportingFeeOnTransferTokens( swapAmt, 0, path, address(this), block.timestamp ) {} catch { return; } ```